Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2014-4561
Disclosure Date: January 10, 2020 (last updated February 21, 2025)
The ultimate-weather plugin 1.0 for WordPress has XSS
0
Attacker Value
Unknown
CVE-2017-16184
Disclosure Date: June 07, 2018 (last updated November 26, 2024)
scott-blanch-weather-app is a sample Node.js app using Express 4. scott-blanch-weather-app is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
0
Attacker Value
Unknown
CVE-2007-5674
Disclosure Date: October 24, 2007 (last updated October 04, 2023)
Directory traversal vulnerability in index.php in InstaGuide Weather (aka Weather for PHP) 1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PageName parameter.
0
